My users have been getting "Site not secure" warnings since Google launched the SSL everywhere protocol...I have added SSL to all my forums with cPanel's AutoSSL and I can access them via HTTPS:// but I am still seeing "Parts of this site are insecure such as images. "
I have followed the drections on this file as well but it gets a little over my head in parts!
https://docs.mybb.com/1.8/administration...ity/https/
Is there any way to fix this so I get a green light all the way or is it just the nature of forums these days?
Check it out here...
https://www.7173mustangs.com
The next step would be
Removing mixed content - mainly about installing the mentioned
DVZ Secure Content plugin to filter resources included in posts and changing the protocol in templates.
Did you install and set up DVZ Secure Content? This will proxy images in posts via a URL which is served over HTTPS, which will resolve the issue - currently, if someone posts an image URL with http://, that's then classed as insecure content.
(2017-02-03, 02:49 PM)Matt Wrote: [ -> ]Did you install and set up DVZ Secure Content? This will proxy images in posts via a URL which is served over HTTPS, which will resolve the issue - currently, if someone posts an image URL with http://, that's then classed as insecure content.
Yes...I have green lights on everything but Image Proxies...what do I need to do for that?
Also, I tried the plugin on my smaller forum and it removed all existing photos and replaced with links to them instead...see this page for example:
https://www.pa2a.org/thread-ar-porn
(2017-02-03, 03:52 PM)RocketFoot Wrote: [ -> ]Also, I tried the plugin on my smaller forum and it removed all existing photos and replaced with links to them instead...
That's one of the possible options; alternatively, you can use an image proxy that supports HTTPS. If you don't have a server available you can use the
images.weserv.nl configuration (provided by a third party, so availability cannot be guaranteed).
Since https is used for secure sites like when you log into your checking/savings account does using it mean that search engines can't crawl your pages to put you in their search results? I'm asking because I wanted to use https but I also want people to be able to find my forum so...
It's the connection between the server and your browser that's encrypted, not the site itself - Google will be able to see it the same as a normal visitor. Google will give a slight ranking boost to sites with https too.